---
id: CVE-2026-31491
title: 'RDMA/irdma: Harden depth calculation functions'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/irdma: Harden depth calculation functions

  An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size.
  This can cause integer overflow and truncation of …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a <
    3f08351de5ca4f2f724b86ad252fbc21289467e1
  - >-
    Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a <
    cbd852f5700eb3f64392452faf693ac45cae8281
  - >-
    Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a <
    e37afcb56ae070477741fe2d6e61fc0c542cce2d
  - Linux 6.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:35:07.008894Z'
published: '2026-04-22'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:45:01.859Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31491'
references:
  - url: 'https://git.kernel.org/stable/c/3f08351de5ca4f2f724b86ad252fbc21289467e1'
  - url: 'https://git.kernel.org/stable/c/cbd852f5700eb3f64392452faf693ac45cae8281'
  - url: 'https://git.kernel.org/stable/c/e37afcb56ae070477741fe2d6e61fc0c542cce2d'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01903
ingestedAt: '2026-11-05T22:38:32.151Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/irdma: Harden depth calculation functions

An issue was exposed where OS can pass in U32_MAX for SQ/RQ/SRQ size.
This can cause integer overflow and truncation of SQ/RQ/SRQ depth
returning a success when it should have failed.

Harden the functions to do all depth calculations and boundary
checking in u64 sizes.

## Affected

- `Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a < 3f08351de5ca4f2f724b86ad252fbc21289467e1`
- `Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a < cbd852f5700eb3f64392452faf693ac45cae8281`
- `Linux >= 563e1feb5f6ed579acb55850f1bbb831aecf645a < e37afcb56ae070477741fe2d6e61fc0c542cce2d`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.